MAL-2025-70147 Malicious code in quixotic-maroon-duck (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcfdde605e5eceb76d816c525168a3a47f9034d6b204f43ae17f9e87d93c9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71778 Malicious code in zesty-gray-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62eae6d36a89a09ca09387838d7e4f30ec40ee4d4a5bf02fcabad6a79f9528bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-maroon-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d56813dad7dab93487b9e34a0db2719a81bedbaa861ef460b671ef4a3e379b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67465 Malicious code in controversial-orange-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebdea4521e4382b775bb2b870bf75429aac7aa0555ba0dbfe8b4a36230a7541 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69702 Malicious code in official-pink-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5000e62f06106ab11742d94e64d45a09a2614570a774a4e9ca73c455ac0d1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69574 Malicious code in near-rose-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc42bb732ab33de9de4e60010ed2f863080e2ae022367345e2dfec5b0e438742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71351 Malicious code in upper-harlequin-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4cee288100818251aa89a1f7863a70a4a1aee749de4862c29c60607e969805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71408 Malicious code in various-brown-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bae2c0736c91435ad8962b9908822440efc727cc395c972434e778c84cbdcf40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66620 Malicious code in accurate-violet-coyote (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b106f09b5e95bfeb75c485d35e31f11efeadf543d53d6ce9660e8b3cf22baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67642 Malicious code in dear-purple-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6239f93fc5a58bd50a5360c984b31a38b12effbf738d88cbffe9d489a0d27b6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68285 Malicious code in favourable-olive-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e43c1629bfa5aad124c27f6bc0b8ddeb68f69c3283cda5c0c91f70731cd72f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68402 Malicious code in fortunate-amethyst-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3edc9bf1307397448c52dd91018ec02b3d8c0e112ce80a1b095f39a38e2142c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70700 Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68641 Malicious code in hard-turquoise-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0a89cba7a6c8ee6a1100746303a1689f144704c9d14d54cc3851aacfb38f1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71756 Malicious code in yummy-tan-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5185cabb96f550e73a8c0a89645acad905fcd5f859edc4aa0652051859c7fc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68179 Malicious code in experimental-peach-parrotfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d178b33c830f8d4c6efaf63d3847dd8805a3b52eb4eae4dab49c6aa2e47a00c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68263 Malicious code in fast-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fb29ad868a03e9ddb9a0d3cb0c2a305b56894e389f049cf6f3acafb83a9bf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71066 Malicious code in technological-olive-silkworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4842d4e25bb9f194a482745f542216c9ac2ffbf6a6d04ef7e75ca862dbea2038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-tiwul33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2687da5aed6ad4f04ea79cdbd57a9de1e27903e17684fc23d5a9e463aa299bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-botok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 430a8c7f010c1501a8fe1a9cf340475f3071ad201167e4e9c3abf23bce51b0dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...